python/python-spotipy
SHA256
15
0
Fork 0
forked from pool/python-spotipy
Code Pull Requests Activity

OBS-URL: https://build.opensuse.org/package/show/devel:languages:python/python-spotipy?expand=0&rev=35

Browse Source
This commit is contained in:
Markéta Machová
2025-11-27 07:42:57 +00:00
committed by Git OBS Bridge
parent 23c59d0c2f
commit e2808f7577
1 changed files with 2 additions and 2 deletions
Download Patch File Download Diff File Expand all files Collapse all files

4
python-spotipy.changes
View File

@@ -1,7 +1,7 @@
-------------------------------------------------------------------
Thu Nov 27 07:15:05 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
- Update to 2.25.2:
- Update to 2.25.2 (bsc#1254285):
* Security
+ CVE-2025-66040 – HTML for OAuth flow now sanitized: prevents
potential XSS attacks (by @yueyueL) Upgrade if you run spotipy
@@ -17,7 +17,7 @@ Thu Nov 27 07:15:05 UTC 2025 - Daniel Garcia <daniel.garcia@suse.com>
-------------------------------------------------------------------
Fri Feb 28 05:07:51 UTC 2025 - Steve Kowalik <steven.kowalik@suse.com>
- Update to 2.25.1:
- Update to 2.25.1 (bsc#1238059):
* Security
+ CVE-2025-27154 – Cache file permissions tightened: now 600 (user
read/write only) instead of 644, preventing unauthorized local access